Method and system for verification of an endpoint security scan

Abstract

A method of granting access to resources includes the step of receiving a request from a node to access a resource. A scanning agent is generated to gather information about the node. A key is generated and embedded in the scanning agent. The scanning agent is transmitted to the node and gathers information regarding the node. The scanning agent encrypts the gathered information using the at least one generated key. The encrypted gathered information is received from the scanning agent and decrypted.

Description

RELATED APPLICATIONS[0001]The present application claims priority to U.S. Provisional Patent Application No. 60 / 648,669, entitled “Methods and Systems for Verification of an Endpoint Security Scan” filed Jan. 28, 2005, which is incorporated herein by reference.FIELD OF THE INVENTION[0002]The present invention relates to a method and system for endpoint security and, in particular, to a method and system for verification of an endpoint security scan.BACKGROUND OF THE INVENTION[0003]Before an endpoint gains access to corporate enterprise network infrastructure and resources, it is increasingly becoming necessary to determine that the endpoint has undergone host security checks and audits to verify that it meets corporate information technology policies. Examples of such checks include, without limitation, verifying that the anti-virus software on the endpoint is up to date, that the latest operating system patches have been installed and that no malicious software is executing on the ...

AI Technical Summary

Benefits of technology

The present invention relates to a method and system for verifying the execution of a scanning agent to verify the security of an endpoint. The scanning agent collects evidence about the endpoint and encrypts it using a unique key embedded in the agent. This ensures that the appropriate scanning agent was executed and prevents manipulation of the agent. The system also includes an access gateway that receives a request to access a resource and generates a scanning agent based on the requestor's information and a selection of available scan routines. The scanning agent is transmitted to the requestor and gathers information about them, which is then encrypted and decrypted to grant access to the resource. The technical effects of this invention include improved security and accuracy of endpoint scanning and prevention of manipulation of the scanning agent.

Problems solved by technology

A problem with these approaches is that they typically rely on the assumption that the data from the endpoint has not been corrupted or compromised by a malicious attack, such as a man-in-the-middle attack.

Additionally, a large number of corporate attacks come from trusted users, for a variety of social reasons.

These attacks exploit solutions that rely on compliant end users by reporting false evidence.

This creates information technology threats and creates a false sense of security.

Images